WE
Product
Webaccess
103
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 41High 46Medium 13Low 0
Watch
Add Webaccess to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-38389 | 9.8 | Oct 18 | Advantech WebAccess versions 9.02 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute code Affected: through 9.0.2 |
| CVE-2021-33023 | 9.8 | Oct 18 | Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code Affected: through 9.0.2 |
| CVE-2021-38408 | 9.8 | Sep 9 | A stack-based buffer overflow vulnerability in Advantech WebAccess Versions 9.02 and prior caused by a lack of proper validation of the length of user-supplied data may allow… Affected: through 9.02 |
| CVE-2020-12019 | 9.8 | Jun 15 | WebAccess Node Version 8.4.4 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code Affected: through 8.4.4 |
| CVE-2020-12022 | 9.8 | May 8 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0 Affected: through 8.4.4; 9.0.0 |
| CVE-2020-12006 | 9.8 | May 8 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0 Affected: through 8.4.4; 9.0.0 |
| CVE-2020-12002 | 9.8 | May 8 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0 Affected: through 8.4.4; 9.0.0 |
| CVE-2020-10638 | 9.8 | May 8 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0 Affected: through 8.4.4; 9.0.0 |
| CVE-2019-3951 | 9.8 | Dec 12 | Advantech WebAccess before 8.4.3 allows unauthenticated remote attackers to execute arbitrary code or cause a denial of service (memory corruption) due to a stack-based buffer… Affected: before 8.4.3 |
| CVE-2019-13558 | 9.8 | Sep 18 | In WebAccess versions 8.4.1 and prior, an exploit executed over the network may cause improper control of generation of code, which may allow remote code execution, data… Affected: through 8.4.1 |
| CVE-2019-13550 | 9.8 | Sep 18 | In WebAccess, versions 8.4.1 and prior, an improper authorization vulnerability may allow an attacker to disclose sensitive information, cause improper control of generation of… Affected: through 8.4.1 |
| CVE-2019-3975 | 9.8 | Sep 10 | Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.1 allows a remote, unauthenticated attacker to execute arbitrary code via a crafted IOCTL 70603 RPC message Affected: 8.4.1 |
| CVE-2019-10993 | 9.8 | Jun 28 | In WebAccess/SCADA Versions 8.3.5 and prior, multiple untrusted pointer dereference vulnerabilities may allow a remote attacker to execute arbitrary code Affected: through 8.3.5 |
| CVE-2019-10991 | 9.8 | Jun 28 | In WebAccess/SCADA, Versions 8.3.5 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data Affected: through 8.3.5 |
| CVE-2019-10989 | 9.8 | Jun 28 | In WebAccess/SCADA Versions 8.3.5 and prior, multiple heap-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data Affected: through 8.3.5 |
| CVE-2019-3954 | 9.8 | Jun 19 | Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.0 allows a remote, unauthenticated attacker to execute arbitrary code by sending a crafted IOCTL 81024 RPC call Affected: 8.4.0 |
| CVE-2019-3953 | 9.8 | Jun 18 | Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.0 allows a remote, unauthenticated attacker to execute arbitrary code by sending a crafted IOCTL 10012 RPC call Affected: 8.4.0 |
| CVE-2019-3940 | 9.8 | Apr 9 | Advantech WebAccess 8.3.4 is vulnerable to file upload attacks via unauthenticated RPC call Affected: 8.3.4 |
| CVE-2019-6552 | 9.8 | Apr 5 | Advantech WebAccess/SCADA, Versions 8.3.5 and prior Affected: through 8.3.5 |
| CVE-2019-6550 | 9.8 | Apr 5 | Advantech WebAccess/SCADA, Versions 8.3.5 and prior Affected: through 8.3.5 |
| CVE-2018-14816 | 9.8 | Oct 23 | Advantech WebAccess 8.3.1 and earlier has several stack-based buffer overflow vulnerabilities that have been identified, which may allow an attacker to execute arbitrary code Affected: through 8.3.1 |
| CVE-2018-14806 | 9.8 | Oct 23 | Advantech WebAccess 8.3.1 and earlier has a path traversal vulnerability which may allow an attacker to execute arbitrary code Affected: through 8.3.1 |
| CVE-2018-8845 | 9.8 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 8.2_20170817; through 8.3.0 |
| CVE-2018-7505 | 9.8 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 8.2_20170817; through 8.3.0 |
| CVE-2018-7499 | 9.8 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 8.2_20170817; through 8.3.0 |
| CVE-2018-7497 | 9.8 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 8.2_20170817; through 8.3.0 |
| CVE-2018-10589 | 9.8 | May 15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior… Affected: through 8.2_20170817; through 8.3.0 |
| CVE-2018-6911 | 9.8 | Feb 13 | The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS commands via a single argument (aka the command parameter) Affected: 8.3.0 |
| CVE-2017-16724 | 9.8 | Jan 5 | A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to 8.3 Affected: before 8.3 |
| CVE-2017-16720 | 9.8 | Jan 5 | A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier Affected: through 8.3.2 |
| CVE-2017-16716 | 9.8 | Jan 5 | A SQL Injection issue was discovered in WebAccess versions prior to 8.3 Affected: before 8.3 |
| CVE-2017-12708 | 9.8 | Aug 30 | An Improper Restriction Of Operations Within The Bounds Of A Memory Buffer issue was discovered in Advantech WebAccess versions prior to V8.2_20170817 Affected: through 8.2 |
| CVE-2017-12706 | 9.8 | Aug 30 | A stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817 Affected: through 8.2 |
| CVE-2017-12698 | 9.8 | Aug 30 | An Improper Authentication issue was discovered in Advantech WebAccess versions prior to V8.2_20170817 Affected: through 8.2 |
| CVE-2017-5154 | 9.8 | Feb 13 | An issue was discovered in Advantech WebAccess Version 8.1 Affected: 8.1 |
| CVE-2016-0859 | 9.8 | Jan 15 | Integer overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer… Affected: through 8.0 |
| CVE-2016-0857 | 9.8 | Jan 15 | Multiple heap-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors Affected: through 8.0 |
| CVE-2016-0856 | 9.8 | Jan 15 | Multiple stack-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors Affected: through 8.0 |
| CVE-2016-0854 | 9.8 | Jan 15 | Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows… Affected: through 8.0 |
| CVE-2019-10985 | 9.1 | Jun 28 | In WebAccess/SCADA, Versions 8.3.5 and prior, a path traversal vulnerability is caused by a lack of proper validation of a user-supplied path prior to use in file operations Affected: through 8.3.5 |
| CVE-2017-5152 | 9.1 | Feb 13 | An issue was discovered in Advantech WebAccess Version 8.1 Affected: 8.1 |
| CVE-2020-12026 | 8.8 | May 8 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0 Affected: through 8.4.4; 9.0.0 |
| CVE-2020-10607 | 8.8 | Mar 27 | In Advantech WebAccess, Versions 8.4.2 and prior Affected: through 8.4.2 |
| CVE-2019-13556 | 8.8 | Sep 18 | In WebAccess versions 8.4.1 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data Affected: through 8.4.1 |
| CVE-2019-13552 | 8.8 | Sep 18 | In WebAccess versions 8.4.1 and prior, multiple command injection vulnerabilities are caused by a lack of proper validation of user-supplied data and may allow arbitrary file… Affected: through 8.4.1 |
| CVE-2019-10987 | 8.8 | Jun 28 | In WebAccess/SCADA Versions 8.3.5 and prior, multiple out-of-bounds write vulnerabilities are caused by a lack of proper validation of the length of user-supplied data Affected: through 8.3.5 |
| CVE-2018-15704 | 8.8 | Oct 22 | Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability Affected: through 8.3.2 |
| CVE-2017-12704 | 8.8 | Aug 30 | A heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817 Affected: through 8.2 |
| CVE-2017-12702 | 8.8 | Aug 30 | An Externally Controlled Format String issue was discovered in Advantech WebAccess versions prior to V8.2_20170817 Affected: through 8.2 |
| CVE-2015-3946 | 8.8 | Jan 15 | Cross-site request forgery (CSRF) vulnerability in Advantech WebAccess before 8.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors Affected: through 8.0 |
